CVE-2023-24420

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Zestard Technologies Admin side data storage for Contact Form 7 plugin = 1.1.1 versions...

CVE-2023-24420

CVE-2023-24420 affects the WordPress plugin Admin side data storage for Contact Form 7 (<= 1.1.1). The vulnerability is unauthenticated, allows reflected XSS in the admin-side data storage feature. Root cause is an unauthenticated input handling flaw leading to cross-site scripting. Affected p...

CVE-2023-24420 WordPress Admin side data storage for Contact Form 7 Plugin <= 1.1.1 is vulnerable to Cross Site Scripting (XSS)

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Zestard Technologies Admin side data storage for Contact Form 7 plugin = 1.1.1 versions...

WordPress Admin side data storage for Contact Form 7 Plugin <= 1.1.1 is vulnerable to Cross Site Scripting (XSS)

Software Admin side data storage for Contact Form 7 Type Plugin Vulnerable versions = 1.1.1 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-24420 Patch priority High CVSS severity High 7.1 Developer Claim ownership PSID dcc5858412a7...